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ABSTRACT 

PROBLEM TO BE SOLVED: To enable a network printing 
printing request from plural protocols. 

SOLUTION: A name/name identifier acquire»entmeans2 "cquiresjAe^ of 

a request issuer . protoco and a name H Jre, 
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PURPOSE: To reduce the cost of instruction code history display by 
comparing a correspondence table, which outputs the starting address of a 
mciroinstruction sequence, with a microinstruction address stored in a 
history memory, and then performing the display when a coincidence is 
obtained. 

CONSTITUTION: A microinstruction (OP) code is fetched into a 
microinstruction buffer BUF(sub 1) and transferred to an EAS address 
register REG (sub 1), and one entry into a correspondence table EAS is 

accessed . Respective entries into the EAS contain the starting addresses 
of various .mu. instruction sequences. A starting ad- dress read out of ^ the 
EAS is set in a .mu. instruction counter MIC, whose value is stored in a 
history memory HM successively, and a .mu. instruction sequence which 
corresponds to microinstructions is stored in a control storage CS . Once a 
display request for OP code history is generated, a service processor SVP 

permits a comparator CMP to compare the .mu. instruction address read 
out of the HM with the .mu. instruction address obtained by scanning the 
EAS, and when the both coincide, the corresponding ESA entry is displayed 
on a display device . 



8/5/3 (Item 1 from file: 350) 

DIALOG (R) File 350:Derwent WPIX 

(c) 2003 Thomson Derwent . All rts. reserv. 

015108766 **Image available** 

WPI Acc No: 2003-169285/200317 

XRPX Acc No: N03-133717 

Transition condition fulfillment confirmation method for workflow 
management system, involves comparing identifiers added to signature 
confirming fulfillment of application transition condition, with 
prestored access control list 

Patent Assignee: INT BUSINESS MACHINES CORP (IBMC ) 

Inventor: LUDWIG H H; VAN HERREWEGHEN E; VANHERREWEGHEN E A 

Number of Countries: 027 Number of Patents: 002 
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Abstract (Basic): EP 1274055 Al 

NOVELTY - The fulfillment of the application transition conditions 
(21), is confirmed by signing with the signature (36) that is derived 
from at least one application transition condition and a cryptographic 
key. The content of prestored access control list (41) indicating 
authorized users for signing the application transition condition, is 
compared with each identifier added to the signature. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following: 

(1) Transition condition fulfillment confirming program; 

(2) Computer program product for confirming fulfillment of 
transition condition; and 
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(3) Transition condition fulfillment confirming system. 

USE - For confirming fulfillment of transition condition for 
electronic transactions, in workflow management system (WFMS) using 
devices such as mobile phone, WAP phone and personal digital assistant 
(PDA) that are connected to WFMS. 

ADVANTAGE - Allows parties to exchange certified evaluation 
results, to securely synchronize on a mutually agreed and provable 
state. Enables multiple parties to sign and confirm fulfillment of the 
application transition condition independently from time and place 
without any order. As a result flexibility of the WFMS is improved. The 
prestored access control list provides a high degree of 
nonrepudiation to enable each party to prove to their transaction peer 
the fulfillment of the application transition condition. 

DESCRIPTION OF DRAWING (S) - The figure shows the schematic view of 
the WFMS. 

Application transition condition (21) 
Signature (36) 

Access control list (41) 
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US 20020193142 Al 



H04M-001/00 Provisional application US 2001291052 



Abstract (Basic) : WO 200293330 A2 

NOVELTY - A fingerprint scanner (20) generates output in response 
to a scanned fingerprint to be compared with a reference fingerprint 
pattern (25) . A code memo application (15) containing identification 

data which is accessed only for a selected period of time if there is 
a match between scanned and reference fingerprint. 

DETAILED DESCRIPTION - An INDEPENDENT CLAIM is included for user 
data access control method. 

USE - For accessing particular web sites or personal information 
such as PIN codes , user IDs and password etc. 

ADVANTAGE - Provides a user friendly and secure- feature to 
automatically perform personal information filling operation. Allows 
user to access list of data entries each having associated with 
text identifiers for a selected period of time. 

DESCRIPTION OF DRAWING (S) - The figure shows a block diagram of 
the mobile communication device . 
Code memo application (15) 

Fingerprint scanner (20) 

Reference fingerprint pattern (25) 

pp; 17 DwgNo 1/7 

Title Terms: MOBILE; COMMUNICATE; DEVICE ; ACCESS; WEB; SITE; CODE ; MEMO 
; APPLY; ACCESS; SELECT; PERIOD; TIME; SCAN; FINGERPRINT; OUTPUT; DATA; 
MATCH ; REFERENCE; FINGERPRINT; PATTERN 

Derwent Class: SOS; T01; T04 

International Patent Class (Main) : G06F-001/00 ; H04M-001/00 
File Segment: EPI 

8/5/5 (Item 3 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 

(c) 2003 Thomson Derwent. All rts. reserv. 

014821927 **Image available** 

WPI Acc No: 2002-642633/200269 

XRPX Acc No: N02-507964 

Certificate generation method in computer network, involves receiving 
certificate generation request along with sender node identifier 

Patent Assignee: SUN MICROSYSTEMS INC (SUNM ) 

Inventor: PERLMAN R J 

Number of Countries: 098 Number of Patents: 002 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

US 20020099668 Al 20020725 US 2001767128 A 20010122 200269 B 

WO 200260148 A2 20020801 WO 2001US50819 A 20011227 200269 

Priority Applications (No Type Date) : US 2001767128 A 20010122 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
US 20020099668 Al 12 G06F-017/60 
WO 200260148 A2 E H04L-029/00 



Designated States 


(National) : 


AE 


AG 


AL 


AM 


AT 


AU 


AZ 


BA 


BB 


BG 


BR 


BY 


BZ 


CA 


CH CN CO CR CU CZ 


DE DK DM DZ 


EC 


EE 


ES 


FI 


GB 


GD 


GE 


GH 


GM 


HR 


HU 


ID 


IL 


IN 


IS JP KE KG KP KR 


KZ LC LK LR 


LS 


LT 


LU 


LV 


MA 


MD 


MG 


MK 


MN 


MW 


MX 


MZ 


NO 


NZ 


PH PL PT RO RU SD 


SE SG SI SK 


SL 


TJ 


TM 


TR 


TT 


TZ 


UA 


UG 


UZ 


VN 


YU 


ZA 


ZW 




Designated States 


(Regional) : 


AT 


BE 


CH 


CY 


DE 


DK 


EA 


ES 


FI 


FR 


GB 


GH 


GM 


GR 


IE IT KE LS LU MC 


MW MZ NL OA 


PT 


SD 


SE 


SL 


SZ 


TR 


TZ 


UG 


ZM 


ZW 











Abstract (Basic) : US 20020099668 Al 



Bode Akintola 19-Mar-03 



NOVELTY - A request for generating a certificate is forwarded from 
a sender node to a destination node along with sender node identifier 
. A certificate that includes the identifier is generated by the 
destination node in response to the request received. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following : 

(1) Resource access provision determining method; 

(2) Certification authority; 

(3) Resource access provision determining system; 

(4) Certificate generation program product; 

(5) Certificate generation program; and 

(6) Certificate generating apparatus . 

USE - For certification generation in computer network. 

ADVANTAGE - Revokes certificates that are generated by a 
certification authority (CA) in response to a request from a 
registration authority (RA) . Enables generating smaller certificate 
revocation lists (CRLs) more quickly by utilizing less bandwidth and 
memory, thereby improving overall performance of the system. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
certificate generating computer network system. 
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Abstract (Basic): WO 200214980 A2 

NOVELTY - An interface receives a primary frame from customer 
devices and another interface forwards secondary frame encapsulated 
according to specific method, to data access network. A table 
stores relation between upper layer network data and encapsulation 
method. One of network data is extracted from primary frame and a 
relevant table entry is identified to determine a method for 
encapsulating data within primary frame into secondary frame. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following: 

(a) Upstream data frame provision method; 

(b) Computer readable medium storing upstream data stream provision 
program 

USE - For implementing multimedia data communication services such 
as CATV service, voice service, multicast services, caching service, 
distance service, telecommuting service, long distance data service 
e.g. chat rooms, email and web browsing on Internet, off net and 
telecommunication services, etc., in ADSL-based local access network 
using digital subscriber line technology. 

ADVANTAGE - Enhances digital communication network for subscriber 
line to support communication services. Reduces cost and demand for 
high capacity interoffice while increasing band width requirements. 
Hacker attacks are reduced. QoS of vertical services are supported. 
Errors in data circuit provisioning process are eliminated. The 
equipment is backward compatible. Prevents establishment or usage of 
certain sessions. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
digital subscriber line data network, 
pp; 89 DwgNo 1/15 
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Universal slot device for electronic bus system, identifies failure 
of master/slave bus, based on which the access priority of electronic 
unit is modified relevant to bus priority table 
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Abstract (Basic) : JP 2002007227 A 

NOVELTY - A memory stores a priority table defining access 
priority of master and slave buses connected to electronic units (1-4) 
A comparator compares priority of each unit with table and 
accordingly notification is output through respective bus lines. A 
controller (11) identifies failure of master or slave bus, based on 
which the priority of each unit is changed relevant to the stored 
priority table and slot identification ( ID ) data. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for the 
following : 

(1) Slot priority setting method; 

(2) Electronic device ; and 

(3) Device priority setting method. 
USE - For electronic bus system. 

ADVANTAGE - Eliminates need for allocation of master and slave bus 
slots, thereby flexible bus usage is enabled depending on necessity. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram o 
universal slot device in each electronic unit. (Drawing includes 
non-English language text) . 

Electronic units (1-4) 

Controller (11) 
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Abstract (Basic) : WO 200142906 Al 

NOVELTY - The input text expression is parsed to identify 
keyword, a connector that includes grammatical rules is determined 
based on the keyword and a template in the connector is filled based on 
the input text expression. An agent identified by the connector is 
then launched and the response received as streaming HTML data. 

DETAILED DESCRIPTION - An INDEPENDENT claim is also included for 

USE - For hand-held device . 

ADVANTAGE - It allows the hand-held device to access/retrieve 
information from the Internet without requiring processing HTML pages 
remotes using a proxy server that requires maintenance. 

DESCRIPTION OF DRAWING (S) - The figure shows flow chart of 
information access /retrieval method. 
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Abstract (Basic) : WO 200111819 Al 

NOVELTY - The method has a local revocation list (150) 
containing several revoked identifiers and an access device (110) 
controlling access to content material (111) based on a comparison of 
an access identifier to the several revoked identifiers . A receiver 
(120) receives a new revoked identifier (109) and a relacer randomly 
replaces a revoked identifier with a new one. 

DETAILED DESCRIPTION - An independent claim describes a system and 
a method of facilitating revocable access control and a method for 
controlling access to content material. 

USE - As a method of updating a revocation list to foil an 
adversary using a random fashion to reduce the likelihood of a revoked 
access identifier being accepted for access after a passage of time. 

ADVANTAGE - Decreases the customer satisfaction with an 
unauthorized replication of an authorized identifier . 

DESCRIPTION OF DRAWING (S) - The drawing shows an example block 
diagram of an access control system. 

the local revocation list (150) 

the access device (110) 

the content material (111) 

the receiver (120) 

the new revoked identifier (109) 
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Abstract (Basic) : EP 1063579 A2 

NOVELTY - A content identifier is appended to contents 
transmitted by a server to a client, and accompanies the data 
transmitted in response to the contents. Transmission of data in 
response to contents in access to the contents, is limited to one-time 
transmission to exclude disallowed response data using a copy of the 
contents, and illegal response data intended to falsify information. 

DETAILED DESCRIPTION - The authentication method involves using a 
WWW server program (25) which generates an identifier for an access 
to contents and registers the identifier in an access control 
table (28) . The WWW server program then embeds the identifier in the 
contents before transmitting the contents to a client (1) . A WWW 
browser program (16) displays the contents and adds an access number 
fetched from the contents to input data for the contents. The browser 
program then transmits the input data to a WWW server (2) . If the 
identifier added to the input data received from the browser program 
matches an identifier registered in the access control table 
(28), the server program authenticates the legitimacy of the input data 
and deletes the registered identifier . INDEPENDENT CLAIMS are 
included for; an electronic authentication method; an electronic 
authentication apparatus ; an information processing apparatus ; a 
storage medium for storing a program for executing the method of the 
invention. 

USE - Transmitting contents from processing apparatus rendering 
services to processing apparatus making a request for service, and 
authenticating legitimacy of input data for content access. 

ADVANTAGE - Capable of proving that input data is correct data 
transmitted as a response to contents during access to the contents. 

DESCRIPTION OF DRAWING (S) - The drawing shows a block diagram 
showing the configuration of a system for rendering services using the 
Internet as implemented by an embodiment of the invention. 

Client (10) 

WWW server (2) 

Internet (3) 
Access control table (28) 

Content database (29) 
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Abstract (Basic) : CA 2279028 Al 

NOVELTY - A data from a dropped table (12) is copied in a rolled 
forward selected table space (14) to a storage data structure. The 
selected table space (24) is updated to a desired current state, 
device for accessing the table definition attributes for the 
dropped table (16), in the dropped table history, to create a new table 
in the table space. The data in the storage data structure is loaded 
(36) into a new table (36) . 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are included for: 

(a) a computer program product containing computer readable codes 
for managing database 

(b) a method for recovering dropped table in database management 
system 

USE - In database systems for recovering of tables dropped from 
databases . 

ADVANTAGE - Provides a DBMS in which tables, which have been 
dropped may be recovered without the need to recover and roll forward 
the entire database. Permits the point at which the table was dropped 
to be determined with some accuracy, as well as to determine the 
structure of the table at the time of the drop. 

DESCRIPTION OF DRAWING (S) - The drawing shows the processing of the 
table space to recover dropped table according to the present 
invention. 

dropped table (12) 

selected table space (14) 

dropped table (16) 

table space (24) 

new table (36) 
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Abstract (Basic) : WO 200051010 Al 

NOVELTY - A central storage facility (12) has a hardware storage 
device and network vaults (28) . The storage device data is accessed 
only through the network vault, when the user identification is 
matched with authorization list. A single data access channel connects 
the network vault, so that client software accesses data in network 
vault through the single data access channel. 

DETAILED DESCRIPTION - INDEPENDENT CLAIMS are also included for the 
following : 

(a) method for controlling access to data stored in network vault; 

(b) method for securely storing file on physical storage device ; 

(c) method for sharing information between two users when the two 
users are not connected 

USE - For controlling data access providing secure storage of the 
data by the user organizational intranets and internet connected to any 
internet service provider, bank or any independent party. 

ADVANTAGE - A robust, secure and reliable data storing system is 
achieved by accessing the data stored in the storage facility through a 
single access channel and network vault, thus the network vault allows 
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the access only when the user identification matches with the 
authorization list . The data accessing control system is operable 
by average computer user, such that each individual is able to control 
access to his or her own data, thus avoids requirement of centralized 
system administrator. 

DESCRIPTION OF DRAWING (S) - The figure shows the schematic block 
diagram of illustrative network vault system. 

Central storage facility (12) 

Network vaults (28) 
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Abstract (Basic) : US 6084859 A 

NOVELTY - The comparison component is monitored for checking 
status of supported functions at preselected intervals to determine 
if additions and deletions are made to supported function list. 
Alterations and modifications are made to special function table 
relative to additions and deletions in list. The table is accessible 

to all hosts via gateway device" to allow hosts to obtain an 
updated supported function list. 

DETAILED DESCRIPTION - The special function table stores all 
possibly available functions that can be provided by all available 
different communication platforms. The list of all supported functions 
provided by particular associated communication platform, is obtained. 
The comparison component identifies a subset of supported functions 
and enters them in a special function table stored in a memory location 
that is accessible by gateway device . The communication platform is 
an integrated platform or an open system adapter platform. 

" USE - For establishing communication between initiating host and 
receiving host in distributed networks such as a local area network 
(LAN) or wide area network (WAN) . 
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ADVANTAGE - The usage of MAC headers and provision of information 
including device address on both sending and receiving ends, each 
time between initiating and receiving hosts are eliminated, thereby 
saving latency, memory capacity and introducing efficiency on memory. 

DESCRIPTION OF DRAWING (S) - The figure is a block diagram 
illustrating the computing environment. 
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Abstract (Basic) : EP 1016899 A2 

NOVELTY - Remotely accessed look-up table held in computer, 
accessible via input device and photo finishing unit, contains 
read-write logical memory unit allocated to each film (10) . Film is 
customized by remote access to look-up table to modify photo finishing 
of film. Film is marked with unique identifier (42,44) and access 
code for access to look-up table memory units. 

DETAILED DESCRIPTION - Access code is submitted to access logical 
memory unit. Access code is part of identifier or supplemental to 
identifier . Access code is recorded in logical memory unit. To 
access logical memory unit, both identifier (42) and access code 
must be submitted and matched to protect against misuse of look up 
table. Memory unit in remote look-up table is allocated to film and 
film is sold accompanied by its identifier marked on film, camera and 
packaging. Identifier (42), used to locate look-up table memory unit 
associated with film, has human readable (44) and machine readable (4 6) 
identifier . Photo finishing parameters are written to memory unit, 
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images captured are processed according to parameters. 

INDEPENDENT CLAIMS included for film containing filmstrip in 
light-tight container, photography system . 

USE - Provides remote storage of film data for one-time use camera 
photographic film, provides access code to protect against misuse of 
look-up table. 

ADVANTAGE - Secure storage of film unit data. 

DESCRIPTION OF DRAWING (S) - Diagram of system with film unit access 
coded for user and producer subunits of logical memory unit. 
Film cartridge (10) 
Access code (42,44) 
Film packaging (50) 
pp; 4 3 DwgNo 1 la/21 
Title Terms: SECURE; FILM; IDENTIFY ; MARK; FILM; ACCESS; CODE ; PERMIT 

; ACCESS; REMOTE; UP; TABLE; CONTAIN; PHOTO; FINISH; DATA 
Derwent Class: P82; P83; P84; S06; T01; T04 

International Patent Class (Main) : G03B-017/02; G03B-017/26; G03B-027/46 
International Patent Class (Additional) : G03B-017/24; G03C-003/00; 

G03D-015/00; G06F-017/30 
File Segment: EPI; EngPI 



8/5/15 (Item 13 from file: 350) 

DIALOG (R) File 350: Derwent WPIX 

(c) 2003 Thomson Derwent. All rts. reserv. 

013182893 **Image available** 

WPI Acc No: 2000-354766/200031 

XRPX Acc No: N00-265870 

Control apparatus for program control system, activates synchronous 
object to access thread when thread reception time is equal to preset 
time 

Patent Assignee: TOKYO ELECTRIC CO LTD (TODK ) 
Number of Countries: 001 Number of Patents: 001 
Patent Family: 

Patent No Kind Date Applicat No Kind Date Week 

JP 2000112774 A 20000421 JP 98287508 A 19981009 200031 B 

Priority Applications (No Type Date) : JP 98287508 A 19981009 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
JP 2000112774 A 5 G06F-009/46 

Abstract (Basic) : JP 2000112774 A 

NOVELTY - The function in OS relative to synchronous object 
prevents different thread ' access by performing multi-thread function 
while performing the code of certain range. Primary synchronous 
object accessing management table storing thread reception time, is 
acquired and activated. Secondary synchronous object for thread 
processing is activated only if reception time equals preset time and 
thread is accessed. 

USE - For controlling multi-thread function process of program 
control system. 

ADVANTAGE - Since the thread process is performed by comparing 
the thread reception time with preset time, the multi-thread function 
is performed in the order of thread reception. 

DESCRIPTION OF DRAWING (S) - The figure shows block diagram of 
control apparatus of program control system. 
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Abstract (Basic) : WO 200020981 Al 

NOVELTY - The information in the table is looked up based on object 
identifier and index of the row to be read. A response protocol data 
unit containing information read from the table is composed for several 
rows based on number of rows to be read. The response packet is then 
output . 

DETAILED DESCRIPTION - Protocol data unit (PDU) is identified as 
table block access request. An object identifier (OI) of a table 
to be read from PDU and an index to a row of table are obtained. Based 
on information from PDU, number of rows to be read is determined . 
INDEPENDENT CLAIMS are also included for the following: 

(a) method of issuing and accepting network management protocol; 

(b) network device 

USE - For manipulating data in tables such as management 
information base (MIB) using simple network management protocol (SNMP) . 

ADVANTAGE - By providing an object identifier for the table and 
index to the row, lengthy object identifiers need not be communicated 
for every row or every table entry. Allows immediate access to a 
given block of rows even when the object identifier of those rows 
are not known. 

DESCRIPTION OF DRAWING (S) - The figure shows the graph illustrating 
comparison between amount of time taken for retrieval when accessing 
a large table . 
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Abstract (Basic): WO 9964948 Al 

NOVELTY - A kernel-mode security mechanism (78) compares 
user-based security identifiers (user SID) and the intended type of 
action with list of identifiers and resource actions. If the token is 
devoid of restricted identifiers , access is judged by comparison , 
else another access is checked by comparing restricted SID with 
preset list and resource access is granted to the process, if 
access checks are satisfied. 

DETAILED DESCRIPTION - A restricted token (84) is created by 
changing the attribute of one or more security identifiers (SID) that 

allow access in a parent token (60), to deny access via the 
security identifiers and/or removing one or more privileges from the 
restricted token. Then a process (70) associates another process (94) 
with the restricted token to launch the other process in a restricted 
context . 

INDEPENDENT CLAIMS are also included for resource access grant 
system and a computer readable medium. 
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USE - In client server operating system e.g. windows NT, hand-held 
devices , multiprocessor system, multiprocessor-based or programmable 
consumer electronics, etc. 

ADVANTAGE - Restrictions over network connection is enforced. The 
access check operation results in allowable access for desired 
action. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
resource access determination system. 
Parent token (60) 
Processes (70,94) 
Security mechanism (78) 
Restricted token (84) 
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Abstract (Basic): US 6009467 A 

NOVELTY - In a computing network environment having a gateway 
device , an apparatus for dynamically configuring and monitoring all 
hosts connected to the gateway device comprises: a special function 
table for storing all possibly available functions that can be provided 
by all available different communication platforms; a memory location 
accessible by the gateway device for storing the special function 
table; determining device for obtaining a list of all supported 
functions provided by particularly associated communication platform. 

DETAILED DESCRIPTION - The apparatus further comprises: 
Comparison component for identifying subset of supported functions 
present in and entering them in the special function table representing 
all possible functions; monitoring component for checking status of all 
supported functions at preselected intervals to see if additions and 
deletions are made to the list of supported functions; device for 
making alterations and modifications to the special function table as 
to reflect supported function additions and deletions to the supported 
function list; and special function table also accessible to all 
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hosts through the gateway device so as to allow all the hosts to 

obtain an updated list of all supported functions at any one time. 
USE - For computing networks such as LAN /WAN . 

ADVANTAGE - Allows any host to obtain an updated list of all 
available and supported functions at any time and even select an option 
from the list if desired. Provides for an expanded control command 
interface to reduce the complexity of gateway device configurations 
and address the limitations caused by providing a MAC header. 

DESCRIPTION OF DRAWING (S) - The block diagram shows an 
illustration of a computing environment providing different, functions 
as supported by the environment. 
Host (500) 

Applications (501 ) 

IP protocols (502) 

Gateway connection. (530) 
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Abstract (Basic) : US 6000028 A 

NOVELTY - A table (139) includes entry for each X8 6 condition code 
modifying instruction. The table provides access to evaluation 
routines (140) which when executed modify one or all X86 condition 
code bits. 

DETAILED DESCRIPTION - Another table includes entry for each X86 
condition code bits that are associated with previously executed 
condition code modifying instruction and provides access to 
evaluation routines during which one or all X8 6 condition code bits 
are modified. The tables include pointers, respectively. An INDEPENDENT 
CLAIM is also included for X8 6 condition code modification apparatus 

USE - For modifying X8 6 condition code for execution of computer 
programs on nonnative computer system architecture. 

ADVANTAGE - Needless evaluation of condition codes are avoided as 
condition code modification made by condition code instruction are 
never consumed by subsequent condition code modifying instruction, 
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thus saving CPU processing time. 

DESCRIPTION OF DRAWING (S) - The figure shows the block diagram of 
arrangement, to determine evaluation routines for condition codes . 

Table (139) 

Evaluation routines (140) 
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Abstract (Basic) : JP 11096183 A 

NOVELTY - A list of table names is accessed and displayed based 
on determined security conditions involving a code input by a user. 
The table name required by the user is selected from the list to 
display the corresponding item names. A specific item name is selected 
by the user and data that correspond to a data search conditional 
expression are extracted from a hierarchical database. DETAILED 
DESCRIPTION - INDEPENDENT CLAIMS are included for the following: a 
database access control apparatus ; and a database management system. 

USE - For database management system of client server system. 

ADVANTAGE - Number of display items can be reduced, thereby 
enabling user to choose from display items easily. Ensures security of 
data even if number of users increases. DESCRIPTION OF DRAWING (S) - The 
drawing shows the block diagram of an end user analysis support 
system with the database access control system. 
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Abstract (Basic) : US 5889952 A 

NOVELTY - A network server check whether requesting user 
permission to access the resource based on his name, and stores access 
permission in an access cache. When a second resource is requested by 
user with identical user information, the access permission stored in 
cache is retrieved and then access to resources is granted. 

DETAILED DESCRIPTION - The user requests access to a resource from 
among multiple resources without any authentif ication processing. The 
access permission for requesting user is generated by the network 
server in response to determining that the user has access 
permission , based on his name. Then, the access permission is stored 
in the access cache, and then access to first resource is provided. The 
access permission stored in the cache is retrieved only if the user 
identification information in his name, and additional identity is not 
included. An INDEPENDENT CLAIM is included for resource access control 
apparatus . 

USE - For resources access control in computer network. 

ADVANTAGE - Enables sharing of same user token by multiple users, 
thereby reducing number of file open access checks performed. Utilizes 
filters to group together users with identical access privileges, 
thereby reducing file open access checks. Reduces frequency of file 
open operation thereby reducing CPU time required to perform access 
checks, and improving efficiency and speed of operating system. 

DESCRIPTION OF DRAWING (S) - The figure shows flow chart depicting 
access checking process. 
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Abstract (Basic) : WO 9827502 A 

The method involves intercepting an access request at a client 
system. Log data identifying the access request is sent to a log 
server on the network. The access request is a request to access a 
host system on the network or a request to access a world wide web 
page on the host system. 

The method further involves receiving an access list from the 
log server. The request is compared with the access list . The 
access to the host system is only initiated if the request does not 
conflict with the access list . 

ADVANTAGE - Allows log to be maintained of accesses to 
inappropriate systems . Provides way of prohibiting access to such 
systems, which would be inaccessible to system user. 
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Abstract (Basic) : GB 2312767 A 

The method involves storing a file in a persistent storage medium 
(PSM) . An applet, e.g. small self contained program-data set for 
performing corresp function on a computer, is transmitted from a 
server, and includes an applet identification data and a private key 
encrypted domain identifier and public key pair, a maximum file size 
indicator, and a specification of required operations. The applet is 
received by an application engine and in the event the domain 
identifier is included in the applet, the domain identifier is 
decrypted using the public key. 

The method further entails checking the at least one of the applet 
identification data and decrypted domain identifier against the 
access control list for a match . In the event a match is found, 
It allows the operations specified in the applet on a file stored in 
a persistent storage medium which allow access to the applet as 
specified in the file access control list . 

USE/ADVANTAGE - For transmitting applets that cause computer to 
perform partic function and contains both computer instruction and data 
for processing during its own operation. Provides security for host 
computer excluding file corruption, and excluded excessive file size 
production. 
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Abstract (Basic) : EP 569164 A 

The exchange obtains an extension number from a caller using an 
audio menu to prompt input of the required number. A switch (15) is 
signalled to connect the caller to the automated attendant service to 
place the caller on hold and the required extension is called. 

If the connection is successful, the caller is connected directly. 
If unsuccessful, a failed call procedure is invoked to store the 
response, with the time of call and, if available, the caller's 
telephone number. If a message is left it is also stored for later 
retrieval. 

USE/ADVANTAGE - Provides services regardless of how subscribers are 
connected to public switched telephone network. Stores call 
information, message and time of call to allow return of call if not 
successfully completed initially. 
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Abstract (Basic) : DE 4033352 A 

The Branch Network (Ni) comprises a line monitoring circuit (31) to 
monitor connection with trunk LAN (local area network) . A branch 
circuit (32) is used to monitor connection with branch LAN (2-i). Bus 
(30) and central monitor/control circuitry (33) . 

The apparatus further comprises connection table (TTBi) , group 
register (GRi), and memory (34) to store programs for use of the 
central monitor (33) . A data buffer (DBi) is used to temporarily store 
received data, and filter table (TBi) stores trunk access codes , and 
in particular the procedure for communication between local network 
with trunk LANs and neighbouring branch LANs involves the comparison , 
using circuit (36) of group numbers (G1,G2) with information stored in 
access table . 

USE - LANs. 
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Abstract (Basic) : EP 331900 A 

The apapratus translates the contents of access registers into 
information for use in performing addressing functions for multiple 
virtual address spaces. The access registers represent the full 
register addressing capability of the system but do not directly 
contain the addressing information. The system has a number of general 
purpose registers and access registers associated with the general 
registers. An access list has access list entries which is 
addressed by the contents of the access register. A memory storage 
holds address space number second table entries (ASTE), where the 
contents of the access list entry locate the ASTE and where the 
ASTE contains the addressing information needed to locate a virtual 
address when combined with the contents of a general register. Access 
res translation (ART) consists of the process of determining 
addresssing information by using the access list entry and the 
ASTE. 

The system has available to it at any one time a selection of one 
of two domains each represented by an access list . One domain is 
related to the dispatchable unit taks to be performed and the other is 
related to the address space in which a particular program operates. 
The ART process selects the domain which the access register is using. 
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Abstract (Basic) : EP 306702 A 

The access control list for each device , which defines the 
users which are permitted access to the device , is stored in an 
access control list by the operating system (50) . When access is 
permitted the operating system produces a virtual 1/0 commond (52) 
which is stored in memory. At the same time, information is stored in 
the descriptor sequent bit register (54) in a virtual memory RAM. In a 
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descriptor segment page table (56), a first table responds to a first 
part of the channel number and to a descriptor segment to locate an 1/0 
page descriptor identifying a formly of devices available to the 
user . 

A second table (58) responds to the 1/0 page descriptor and to the 
channel number to locate an 1/0 descriptor including a physical channel 
number which identifies the The virtual channel number is replaced by 
the physical channel number to generate the physical 1/0 commond. 

USE /ADVANTAGE - Data processing system. Has improved throughput. 
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Automatic resource configuration method for computer system - using ROM 
with format header contg. system data about additional hardware cards, 
utilising memory proportionally as required 
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Priority Applications (No Type Date) : US 8739521 A 19870417 
Patent Details: 

Patent No Kind Lan Pg Main IPC Filing Notes 
GB 2203869 A 33 



Abstract (Basic) : GB 2203869 A 

A configuration read-only-memory is placed on each add-on card 
placed in the computer system. The ROM contains the card type and 
identification number, byte lanes used, location of device drivers, 
the device driver code and a length field for specifying the lowest 
address used by the decloration ROM, in addition to the directory 
offset. The ROM header contains a field with an offset to a resource 
directory (50) . 

The resource directory contains a set of entries (51) of resource 
lists and offsets (52) to those resource lists. Each resource list (60) 
contains a resource type (63) and other information (62) as required to 
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configure the computer system. The communication bus between the 
various cards and central processor is divided into a number of byte 
lanes, each capable of carrying data between the components of the 
system. The cards may use any combination of the available byte lanes. 
ADVANTAGE - Allows multiple resources to be defined instead of fixed 
memory allocation. 
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Abstract (Basic) : EP 267418 A 

The imaging device has a page buffer (160) containing a 
representation of symbols in a predetermined order, each representation 
including an a/e pointer. A column position escape memory (170) 
specifies for each of the symbol rows, a page buffer pointer to a first 
symbol in the row and a height, factor identifying a space alloted 
for representing a symbol row. An address escape memory (150) is 
provided, having an entry for each different symbol containing a font 
pointer and a representation of a space alloted for the symbol in 
orthogonal directions. 

A font memory (140) provides a graphic representation of the 
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symbol in at least 2 orientations. A pint commond can be stored which 
specifies a relaton between symbol rows, scan direction and scan 
pogresson. An addressing device successively drives dif f egivenent 
font addresses for a symbol until a quantity of data extracted from the 
font memory beams a specified relation to data extracted from the 
address escape memory. 

ADVANTAGE - Can be used with any paper regardless of printers 
limitations on paper feed ind paper orientation 
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DE 3689569 G G06F-012/14 Based on patent EP 192243 

Abstract (Basic) : EP 192243 A 

A user terminal (20) with preselected security attributes requests 
access to system files for both ordinary and distinguished data 
objects. The processor (21) identifies the security attribute, (31) 
and any distinguished data objects are recognised and acted upon by 
secure processor (33) . These appear to the ordinary data, object 
processor (32) as forbidden fields. The secure processor identifies 
permissible access rights according to a stored security policy (332) 
written interms of security attributes and possible values of security 
level . 
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Access rights to protected system files (22) are provided as a 
signal when the program working set table (334) is active. The signal 
is revoked when the table is destroyed and exit from the secure 
processor is prohibited. 

ADVANTAGE - Provides security without reliance on complex software. 
(44pp Dwg.No.3/8 
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Abstract (Basic) : EP 181503 B 

A table is constructed of prompts and responses internal to a 
remote terminal, when a user logs onto a specified host data 
processing system, by responding to prompts sent from the host 
system. Afterwards the table of prompts and responses is used to 
automatically log on to the host processing system. 

A user selection of the telephone network to be used and the 
telephone number of the host system are used to automatically log on 
to the host . A log-off code is stored in the table and used to end 
the session. 

USE/ADVANTAGE - Allows user access to networks undefined at 
program writing time. For business use. (lOpp Dwg.No.0/10) 
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US 4525780 A 429 

Abstract (Basic) : US 4525780 A 

Each object is identified by a unique and permanent identifier 
code which identifies the data processing system and the object. The 
system uses a protection technique to prevent unauthorised access to 
objects by users who are identified by a subject number which 
identifies the user, a process of the system for executing a user's 
procedure, and the type of operation of the system to be performed by 
the user's procedure. 

An access control list for each object includes an access 
control list entry for each subject having access rights to the 
object and a device and for confirming that a particular active 
subject has access rights to a particular object before permitting 
access to the object. The system also includes stacks for containing 
information relating to the current state of execution of the system. 

ADVANTAGE - Provides structure capable of multiple, concurrent 
operations . 
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Abstract (Basic) : DE 3419219 A 

Each screen sector consists of five lines, twenty characters per 
line. The control unit has line (2) and column counters with the 
outputs compared with reference values to identify a specific 
sector. The comparator outputs are counted to provide a read address 
for the reference registers to provide indexing of values to access 
different sectors. 

A control table is accessed to provide display commands for 
different display formats composed of different sectors. The commands 
are entered into address registers to access the display data memory. 
Data is buffered in a register and the character generators activated 
to provide a display in the designated sectors. 

ADVANTAGE - Reduced software complexity and simple hardware 
construction . 
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Abstract (Basic) : EP 67556 A 

The system provides an addressing mechanism allowing permanent 
and unique identification of all information generated for use in or 
by operation of the system, and an extremely large address space which 
is accessible to and common to all data processing systems. A 
protection mechanism is provided, giving variable access rights 
associated with individual bodies of data. 

An instruction structure is provided where high level user 
language instructions are transformed into dialect coded , uniform, 
intermediate level instructions to provide equal facility of execution 
for a number of languages. Operands are referred to in programs by 
format names transformed, by an internal mechanism transparent to the 
user, into addresses. Multilevel control and stack mechanisms 
protecting the system's internal mechanism from interference are also 
provided. 
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